H3XAOperational intelligence
Live analytical pictureEvidence before assessment
Threat intelligence / Malware

Unknown Logger

[Unknown Logger](https://attack.mitre.org/software/S0130) is a publicly released, free backdoor. Version 1.5 of the backdoor has been used by the actors responsible for the MONSOON campaign. (Citation: Forcepoint Monsoon)

Malware
TypeMalware
External ID—
First seen2026-08-14
Last seen2026-08-14

Confidence

—

[Unknown Logger](https://attack.mitre.org/software/S0130) is a publicly released, free backdoor. Version 1.5 of the backdoor has been used by the actors responsible for the MONSOON campaign. (Citation: Forcepoint Monsoon)

Labels

malware
9 recorded

Relationships

uses
from Patchwork
Group
uses
to Credentials from Web Browsers
Technique
uses
to Disable or Modify Tools
Technique
uses
to Ingress Tool Transfer
Technique
uses
to Keylogging
Technique
uses
to Replication Through Removable Media
Technique
uses
to System Information Discovery
Technique
uses
to System Network Configuration Discovery
Technique
uses
to System Owner/User Discovery
Technique
2 external

References

mitre-attack
S0130
open
Forcepoint Monsoon
https://www.forcepoint.com/sites/default/files/resources/files/forcepoint-security-labs-monsoon-analysis-report.pdf
open
Continue into the dataIntelligence explorerHow to read the graphEvidence & provenance